4 ms·
This sort of approach will leak information about what usernames exist in the system, which has security implications. Depending on the nature of the applicati
by camccann 17y ago
This sort of approach will leak information about what usernames exist in the system, which has security implications.
Depending on the nature of the application you may or may not need to worry about this (e.g., obviously irrelevant if the site has a user list that shows the login names).
- jonknee 17y agoMost sign up forms give away that information anyway--try putting in a name or email that's already taken and you'll get a form validation error.